Comparison Overview

GardaWorld

VS

Securitas Security Services USA, Inc.

GardaWorld

2300 Émile-Bélanger, Saint-Laurent , Quebec, CA, H4R 3J4
Last Update: 2025-11-26
Between 700 and 749

GardaWorld is the world’s largest privately-owned security services company, offering cash services, physical and specialized security solutions, and with our Crisis24 portal, the dissemination of verified information related to international security. GardaWorld est la plus importante entreprise privée de sécurité au monde, offrant des services de transport de valeurs, des solutions de sécurité physique et spécialisée, et avec le portail Crisis24, la diffusion d’informations vérifiées en lien avec la sécurité internationale.

NAICS: 5616
NAICS Definition: Investigation and Security Services
Employees: 23,109
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Securitas Security Services USA, Inc.

9 Campus Drive, Parsippany, 07054, US
Last Update: 2025-11-26
Between 750 and 799

Securitas knows Security. It is our only business. As The Leader in Protective Services, we invest in people, knowledge and technology to deliver customized, cost-effective and class-leading solutions. Our parent company, Securitas AB, is a global company headquartered in Stockholm, Sweden and employs over 370,000 people in 58 countries. Securitas USA, and its 95,000 employees and more than 500 branch managers, is the most locally-focused security company in the United States. With a 91% customer retention rate, Securitas is the only organization capable of providing security expertise and solutions across the Six Pillars of Protective Services; specifically: On-Site, Mobile, and Remote Guarding; Electronic Security, Fire & Safety, and Corporate Risk Management. Through our class-leading Securitas Operation Center and by leveraging the largest Mobile footprint in North America, Securitas is now also delivering Integrated Guarding, a customizable and cohesive security solution. Interested in joining Securitas? Every day more than 10,000 organizations around the world rely on Securitas professionals to keep their human, property and intellectual assets safe and secure. Securitas employees come from all walks of life, bringing with them a variety of distinctive skills and perspectives. We offer a broad range of employment opportunities, including security professionals, branch managers, business development staff, and a wide variety of management and leadership roles. Our core values are Integrity, Vigilance and Helpfulness. If you live by these values, we’re looking for you to join us!

NAICS: 5616
NAICS Definition: Investigation and Security Services
Employees: 43,013
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gardaworld.jpeg
GardaWorld
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/securitas-security-services-usa-inc.jpeg
Securitas Security Services USA, Inc.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
GardaWorld
100%
Compliance Rate
0/4 Standards Verified
Securitas Security Services USA, Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Security and Investigations Industry Average (This Year)

No incidents recorded for GardaWorld in 2025.

Incidents vs Security and Investigations Industry Average (This Year)

No incidents recorded for Securitas Security Services USA, Inc. in 2025.

Incident History — GardaWorld (X = Date, Y = Severity)

GardaWorld cyber incidents detection timeline including parent company and subsidiaries

Incident History — Securitas Security Services USA, Inc. (X = Date, Y = Severity)

Securitas Security Services USA, Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gardaworld.jpeg
GardaWorld
Incidents

Date Detected: 10/2023
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog
https://images.rankiteo.com/companyimages/securitas-security-services-usa-inc.jpeg
Securitas Security Services USA, Inc.
Incidents

No Incident

FAQ

Securitas Security Services USA, Inc. company demonstrates a stronger AI Cybersecurity Score compared to GardaWorld company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

GardaWorld company has historically faced a number of disclosed cyber incidents, whereas Securitas Security Services USA, Inc. company has not reported any.

In the current year, Securitas Security Services USA, Inc. company and GardaWorld company have not reported any cyber incidents.

Neither Securitas Security Services USA, Inc. company nor GardaWorld company has reported experiencing a ransomware attack publicly.

GardaWorld company has disclosed at least one data breach, while the other Securitas Security Services USA, Inc. company has not reported such incidents publicly.

Neither Securitas Security Services USA, Inc. company nor GardaWorld company has reported experiencing targeted cyberattacks publicly.

Neither GardaWorld company nor Securitas Security Services USA, Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

Securitas Security Services USA, Inc. company has more subsidiaries worldwide compared to GardaWorld company.

Securitas Security Services USA, Inc. company employs more people globally than GardaWorld company, reflecting its scale as a Security and Investigations.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds SOC 2 Type 1 certification.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds SOC 2 Type 2 certification.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds ISO 27001 certification.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds PCI DSS certification.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds HIPAA certification.

Neither GardaWorld nor Securitas Security Services USA, Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H